Advisories · Technology
kalcaddle kodbox.
Every CVE that names kalcaddle kodbox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
kalcaddle kodbox SSO API Login apiLogin redirect
- kalcaddle kodbox
- Open redirect
- CVSS 6.9 Medium
kalcaddle kodbox msgWarning Plugin action improper authorization
- kalcaddle kodbox
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection
- kalcaddle Kodbox
- Other injection
- Command injection
- CVSS 6.3 Medium
kalcaddle kodbox shareMake/shareCheck server-side request forgery
- kalcaddle kodbox
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
kalcaddle kodbox Password-protected Share auth.class.php can improper authentication
- kalcaddle kodbox
- Authentication bypass
- CVSS 6.3 Medium
kalcaddle kodbox Public Share userShare.class.php add privilege escalation
- kalcaddle kodbox
- Broken access control
- Unrestricted file upload
- CVSS 6.3 Medium
kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication
- kalcaddle kodbox
- Authentication bypass
- CVSS 5.1 Medium
kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection
- kalcaddle kodbox
- Command injection
- CVSS 2.3 Low
kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery
- kalcaddle kodbox
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 5.3 Medium
kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery
- kalcaddle kodbox
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key
- kalcaddle kodbox
- Hard-coded credentials
- CWE-320
- CVSS 5.3 Medium
kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection
- kalcaddle kodbox
- Command injection
- CVSS 5.3 Medium
kalcaddle kodbox Compression zip command injection
- kalcaddle kodbox
- Other injection
- Command injection
- CVSS 5.3 Medium
kalcaddle kodbox index.class.php fileOut path traversal
- kalcaddle kodbox
- Path traversal
- CVSS 5.3 Medium
kalcaddle kodbox editor.class.php fileSave path traversal
- kalcaddle kodbox
- Path traversal
- CVSS 5.1 Medium
kalcaddle kodbox Download from Link serverDownload server-side request forgery
- kalcaddle kodbox
- Server-side request forgery (SSRF)
- CVSS 7.3 High
kalcaddle kodbox app.php cover server-side request forgery
- kalcaddle kodbox
- Server-side request forgery (SSRF)
- CVSS 7.3 High
kalcaddle kodbox index.class.php check command injection
- kalcaddle kodbox
- Command injection